OT: iptables rules request

From: James Pifer (jep_at_obrien-pifer.com)
Date: 05/31/05

  • Next message: Phil: "Re: General routing question?" 
    To: Fedora <fedora-list@redhat.com>
Date: Tue, 31 May 2005 11:04:29 -0400

    I'm looking for some help with iptables. Anyone good in iptables willing
    to assist with (ie write) a few rules?

    I have a box running iptables and there are three networks going through
    it.

    eth0 is the local network 192.168.192.0
    eth1 is the internet
    ipsec0 is a vpn 172.16.0.0

    Everything is good except I'd like to limit what machines on my
    192.168.192 network can communicate over the ipsec0 connection. Here's
    what I'd like to accomplish:

    1) Allow 192.168.192.2 to only use port 53 (UDP) through ipsec0
    2) Allow 192.168.192.100 full access through ipsec0
    3) Allow 192.168.192.10-192.168.192.25 full access through ipsec0
    4) Disallow anything else through ipsec0

    If I have this much, I figure I could use them as a template to do more.
    I've been digging through tutorials and googling for iptables stuff.
    Didn't find a lot dealing with three seperate NICs like this. I can kind
    of see what it might look like, but I really don't want to spend the
    whole day by trial and error getting this to work.

    Anyone willing to assist (give) me rules that would do this?

    Any help is appreciated.

    James 

    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Phil: "Re: General routing question?"

    Relevant Pages

    • Re: Making a router from a Linux machine
      ... First make sure that the two networks can talk to each other. ... make sure that your central machine is the default gateway on ... Once you have that working then you can get the firewall working. ... >with iptables just didn't help - I still don't have a solution. ...
      (comp.os.linux.networking)
    • Re: local nets
      ... i have a linux box with 3 networks on! ... >> i masq both local nets through eth0, ... > Which distro do you use, and do you use IPCHAINS, IPTABLES etc?? ...
      (comp.os.linux.security)
    • Re: How is a software f/w inferior to a hardware f/w?
      ... >ZoneAlarm protects only the computer it is on. ... >more networks from other networks. ... then iptables may be more suitable. ...
      (comp.security.firewalls)
    • Re: IPTables forwarding rule
      ... Harry Phillips wrote: ... > iptables. ... > internal host. ... > on different networks but not when they are on the same network. ...
      (alt.linux)
    • Re: IPTables forwarding rule
      ... Harry Phillips wrote: ... > iptables. ... > internal host. ... > on different networks but not when they are on the same network. ...
      (alt.os.linux)